Following PHP and Java, the compression library "Brotli" is now the subject of a vulnerability. Looking at the name alone, ...

How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...

Keep Pandrator local unless other people need to reach it. For access from other computers, use a VPN or an HTTPS reverse proxy. Named accounts, shared workspaces and project links are separate ...

Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.

Modern medical and salon IT infrastructure, including web booking systems for clinics and salons, medical interview forms, ...

On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index (PyPI) and distributed through official container images. The malicious package added files that ...

Cold storage crypto recovery drill: restore your backup on a second wallet and prove it with a watch-only Python script in 12 ...

The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the maintainer's report and security firms' analyses, we explain how the credential ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach reports, expert analysis, and actionable insights for infosec professionals and ...

Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape cyber risk.

Learn how to get started with the OpenRouter API to call multiple AI models through one API, compare responses, switch models ...